{"id":21392211,"url":"https://github.com/sysdiglabs/falco-aws-firelens-integration","last_synced_at":"2026-01-03T07:16:17.318Z","repository":{"id":98014192,"uuid":"215310365","full_name":"sysdiglabs/falco-aws-firelens-integration","owner":"sysdiglabs","description":null,"archived":false,"fork":false,"pushed_at":"2023-04-06T17:01:17.000Z","size":17,"stargazers_count":13,"open_issues_count":3,"forks_count":10,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-23T01:22:23.987Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Makefile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sysdiglabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-10-15T13:48:27.000Z","updated_at":"2023-08-12T22:19:54.000Z","dependencies_parsed_at":null,"dependency_job_id":"7338b89f-7aaa-4067-92f0-99069c73ac34","html_url":"https://github.com/sysdiglabs/falco-aws-firelens-integration","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Ffalco-aws-firelens-integration","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Ffalco-aws-firelens-integration/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Ffalco-aws-firelens-integration/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Ffalco-aws-firelens-integration/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sysdiglabs","download_url":"https://codeload.github.com/sysdiglabs/falco-aws-firelens-integration/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243878411,"owners_count":20362432,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-22T13:39:36.756Z","updated_at":"2026-01-03T07:16:17.284Z","avatar_url":"https://github.com/sysdiglabs.png","language":"Makefile","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Multi-cluster security with Falco and FluentBit on Amazon EKS \u0026 ECS\n\nThis repository hold all source code needed for the blogpost about `Multi-cluster\nsecurity with Falco and FluentBit on Amazon EKS \u0026 ECS`\n\nThere are one directory per step or piece of infrastructure to automate:\n\n* `ecs`: Deploy Falco and FluentBit on ECS\n* `eks`: Deploy Falco and FluentBit on EKS\n\n## Getting started\n\nYou will need the following requisites:\n\n* `Helm` with Tiller deployed on the EKS cluster\n* `aws cli` tools to handle all AWS configuration settings. Ensure you are using\n  an aws cli tools which uses boto greater or equal to 1.12.224\n* `jq` to help with the scripts\n\n### Deploying EKS integration\n\nEnsure your worker nodes can send logs to CloudWatch. We automated this step with\nthe Makefile but you will need to edit and set the `NODE_ROLE_NAME` value to your\nown settings. Then:\n\n```\n$ cd eks\n$ make\n```\n\nThis will create and attach the EKS-CloudWatchLogs policy to your node IAM role\nto make sure you can send logs to CloudWatch and will deploy FluentBit daemonset\nwith the CloudWatch output plugin.\n\nFinally it will also deploy Falco using the Helm Chart.\n\n### Deploying ECS integration\n\nLike EKS, we automated this step with a Makefile. You will need to edit and set\nthe `CLUSTER_ARN` and `NODE_ROLE_NAME` as well. Then:\n\n```\n$ cd ecs\n$ make\n```\n\nAnd this will create and attach the ECS-CloudWatchLogs policy to your node IAM\nrole to ensure you can send logs to CloudWatch and will create a task which\ndeploys Falco on ECS with an attached sidecar container for FluentBit which\nsends the logs to CloudWatch.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Ffalco-aws-firelens-integration","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsysdiglabs%2Ffalco-aws-firelens-integration","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Ffalco-aws-firelens-integration/lists"}